@seams/wallet-server 0.7.3 → 0.9.0

package/dist/types/wallet-server/src/core/storeBackends.d.ts

@@ -1,83 +0,0 @@
-import type { NormalizedLogger } from './logger';
-import type { CloudflareDurableObjectNamespaceLike, CloudflareDurableObjectStubLike, ThresholdStoreConfigInput } from './types';
-import { type D1TenantStoreOptions } from './d1TenantStore';
-export type StoreFactoryInput = {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-};
-/** The first of `namespace`, `durableObjectNamespace` and `THRESHOLD_DO_NAMESPACE` that is one. */
-export declare function resolveDurableObjectNamespace(config: Record<string, unknown>): CloudflareDurableObjectNamespaceLike | null;
-/** The object a store config names: `objectName`, else `name`, else the default. */
-export declare function durableObjectName(config: Record<string, unknown>): string;
-export declare function durableObjectStub(namespace: CloudflareDurableObjectNamespaceLike, objectName: string): CloudflareDurableObjectStubLike;
-/** Posts one JSON request to a store's Durable Object. */
-export declare function postDurableObjectRequest(stub: CloudflareDurableObjectStubLike, body: unknown): Promise<Response>;
-/**
- * Posts a request and parses the object's JSON reply; an empty reply reads as null. An HTTP error
- * or a reply that is not JSON throws, naming the store: `<storeName> DO store …`.
- */
-export declare function requestDurableObjectJson(stub: CloudflareDurableObjectStubLike, body: unknown, storeName: string): Promise<unknown>;
-/** A store's records in a key-value backend, under keys the store builds. */
-export interface KeyValueRecords<R> {
-    get(key: string): Promise<R | null>;
-    /** Reads and deletes, so a one-time record is used at most once. */
-    take(key: string): Promise<R | null>;
-    set(key: string, record: R, ttlMs?: number): Promise<void>;
-    del(key: string): Promise<void>;
-}
-/** How a key-value store names itself in the log lines and errors of its backend selection. */
-export type KeyValueStoreSpec<R> = {
-    /** Tags log lines, `[<tag>] …`, and names the store in Durable Object namespace errors. */
-    readonly tag: string;
-    /** Names the store in log lines and in D1, Upstash and Redis errors, e.g. `login challenge`. */
-    readonly label: string;
-    /** Names the store in missing-connection errors, e.g. `webauthn store`. */
-    readonly connectionErrorSubject: string;
-    /** Ends the Durable Object log line, after `Using Cloudflare Durable Object `. */
-    readonly durableObjectLog: string;
-    /** Leads Durable Object request errors, as in `<name> DO store HTTP 500`. */
-    readonly durableObjectErrorName: string;
-    /** Qualifies the in-memory fallback's log line when nothing is configured. */
-    readonly unconfiguredNote: string;
-    /** Names the store in D1 scope errors. */
-    readonly d1StoreName: string;
-    /** The store's key prefix, which is also its D1 namespace. */
-    readonly resolvePrefix: (config: Record<string, unknown>) => string;
-    /** Validates a record read back from a remote backend; null when it is invalid. */
-    readonly parse: (raw: unknown) => R | null;
-};
-/** Builds the store for the backend the config selects. */
-type KeyValueStoreBuilders<R, S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    /** Upstash REST, Redis TCP and Durable Object backends. */
-    readonly keyValue: (records: KeyValueRecords<R>, prefix: string) => S;
-    readonly inMemory: (prefix: string) => S;
-};
-/**
- * Selects a key-value store's backend: the config's explicit `kind`, else Upstash or Redis from
- * env-shaped config, else in memory. The store type `S` comes from the caller's return type.
- */
-export declare function createKeyValueStore<R, S>(input: StoreFactoryInput, spec: KeyValueStoreSpec<R>, build: KeyValueStoreBuilders<R, NoInfer<S>>): S;
-/** How a store on D1, a Durable Object or memory names itself in its selection's logs and errors. */
-export type DurableObjectStoreSpec = {
-    /** Tags log lines and D1 errors, `[<tag>] …`. */
-    readonly tag: string;
-    /** Names the store in kind errors, e.g. `wallet` in `Unknown wallet store kind`. */
-    readonly name: string;
-    /** The in-memory fallback's log line, after the tag. */
-    readonly inMemoryLog: string;
-    /** Names the store in D1 scope errors. */
-    readonly d1StoreName: string;
-    /** The store's key prefix, which is also its D1 namespace. */
-    readonly resolvePrefix: (config: Record<string, unknown>) => string;
-};
-type DurableObjectStoreBuilders<S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    readonly durableObject: (stub: CloudflareDurableObjectStubLike, prefix: string) => S;
-    readonly inMemory: (prefix: string) => S;
-};
-/** Selects the backend the config's `kind` names: D1, a Durable Object, or else memory. */
-export declare function createDurableObjectStore<S>(input: StoreFactoryInput, spec: DurableObjectStoreSpec, build: DurableObjectStoreBuilders<NoInfer<S>>): S;
-export {};
-//# sourceMappingURL=storeBackends.d.ts.map

package/dist/types/wallet-server/src/core/utils.d.ts

@@ -1,3 +0,0 @@
-export declare function formatGasToTGas(gasString: string): string;
-export declare function formatYoctoToNear(yoctoAmount: string | bigint): string;
-//# sourceMappingURL=utils.d.ts.map

package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts

@@ -1,96 +0,0 @@
-import { type KeyValueRecords, type StoreFactoryInput } from './storeBackends';
-import { type D1SchemaOptions, type D1TenantStoreOptions } from './d1TenantStore';
-/** What sets one WebAuthn store apart from the others. */
-export type WebAuthnStoreSpec<R> = {
-    /** Names the store in log lines and errors, e.g. `login challenge`. */
-    readonly label: string;
-    /** Config key that replaces the whole key prefix, e.g. `WEBAUTHN_LOGIN_CHALLENGE_PREFIX`. */
-    readonly prefixConfigKey: string;
-    /** The default prefix's last segment: `<THRESHOLD_PREFIX>:webauthn:<prefixName>:`. */
-    readonly prefixName: string;
-    /** Validates a record being written or read back; null when it is invalid. */
-    readonly parse: (raw: unknown) => R | null;
-    /** Ends the Durable Object log line, e.g. `login challenge persistence`. */
-    readonly durableObjectLogSubject: string;
-    /** Names the store in missing-connection errors, e.g. `webauthn store`. */
-    readonly connectionErrorSubject: string;
-    /** Qualifies the in-memory fallback's log line, e.g. `non-persistent`. */
-    readonly unconfiguredNote: string;
-    /** Names the store in D1 scope errors, e.g. `credential`. */
-    readonly d1ScopeLabel: string;
-};
-/** Builds the store for the backend the config selects. */
-type WebAuthnStoreBuilders<R, S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    /** Upstash REST, Redis TCP and Durable Object backends. */
-    readonly keyValue: (records: KeyValueRecords<R>, prefix: string) => S;
-    readonly inMemory: (records: InMemoryWebAuthnRecords<R>, prefix: string) => S;
-};
-/**
- * A store's key prefix, which is also its D1 namespace: `config[spec.prefixConfigKey]` when set,
- * else `<THRESHOLD_PREFIX>:webauthn:<spec.prefixName>:`. It always ends with a colon.
- */
-export declare function resolveWebAuthnStorePrefix(config: Record<string, unknown>, spec: Pick<WebAuthnStoreSpec<unknown>, 'prefixConfigKey' | 'prefixName'>): string;
-/**
- * Selects a WebAuthn store's backend: the config's explicit `kind`, else Upstash or Redis from
- * env-shaped config, else in memory. The store type `S` comes from the caller's return type.
- */
-export declare function createWebAuthnStore<R, S>(input: StoreFactoryInput, spec: WebAuthnStoreSpec<R>, build: WebAuthnStoreBuilders<R, NoInfer<S>>): S;
-/** Keeps each record as it was put, without expiry; reads return the stored object. */
-export declare class InMemoryWebAuthnRecords<R> implements KeyValueRecords<R> {
-    readonly map: Map<string, R>;
-    get(key: string): Promise<R | null>;
-    take(key: string): Promise<R | null>;
-    set(key: string, record: R): Promise<void>;
-    del(key: string): Promise<void>;
-}
-/**
- * Per-credential records under `${prefix}${ownerId}:${credentialIdB64u}`, where the owner is the
- * user for authenticators and the RP ID for credential bindings. A blank id reads as missing.
- */
-export declare class WebAuthnCredentialRecords<R> {
-    private readonly records;
-    private readonly prefix;
-    constructor(records: KeyValueRecords<R>, prefix: string);
-    get(ownerId: string, credentialIdB64u: string): Promise<R | null>;
-    set(ownerId: string, credentialIdB64u: string, record: R): Promise<void>;
-    del(ownerId: string, credentialIdB64u: string): Promise<void>;
-    private key;
-    private trimmedKey;
-}
-/** Names a WebAuthn store in D1 scope errors, e.g. `WebAuthn credential store`. */
-export declare function webAuthnD1Store(d1ScopeLabel: string): string;
-type WebAuthnChallengeRecord = {
-    readonly challengeId: string;
-    readonly createdAtMs: number;
-    readonly expiresAtMs: number;
-};
-/** Holds each challenge until it is consumed once or expires. */
-export interface WebAuthnChallengeStore<R> {
-    put(record: R): Promise<void>;
-    consume(challengeId: string): Promise<R | null>;
-    del(challengeId: string): Promise<void>;
-}
-export type WebAuthnChallengeStoreSpec<R> = WebAuthnStoreSpec<R> & {
-    /** The `challenge_kind` that tells this store's rows apart in the shared D1 table. */
-    readonly challengeKind: 'login' | 'sync';
-};
-export interface D1WebAuthnChallengeStoreOptions extends D1TenantStoreOptions {
-    readonly now?: () => Date;
-}
-export declare const WEBAUTHN_CHALLENGE_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_challenges (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      challenge_id TEXT NOT NULL,\n      challenge_kind TEXT NOT NULL,\n      record_json TEXT NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      expires_at_ms INTEGER NOT NULL,\n      PRIMARY KEY (namespace, org_id, project_id, env_id, challenge_id),\n      CHECK (length(challenge_id) > 0),\n      CHECK (challenge_kind IN ('login', 'sync', 'recovery_registration')),\n      CHECK (json_valid(record_json)),\n      CHECK (created_at_ms > 0),\n      CHECK (expires_at_ms > created_at_ms)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_challenges_expiry_idx\n      ON webauthn_challenges (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        challenge_kind,\n        expires_at_ms\n      )\n  "];
-export declare function ensureWebAuthnChallengeStoreD1Schema(options: D1SchemaOptions): Promise<void>;
-export declare function createWebAuthnChallengeStore<R extends WebAuthnChallengeRecord>(input: StoreFactoryInput, spec: WebAuthnChallengeStoreSpec<R>, d1: (options: D1TenantStoreOptions) => WebAuthnChallengeStore<R>): WebAuthnChallengeStore<R>;
-export declare class D1WebAuthnChallengeStore<R extends WebAuthnChallengeRecord> implements WebAuthnChallengeStore<R> {
-    private readonly spec;
-    readonly adapterKind = "d1";
-    private readonly table;
-    private readonly now;
-    private readonly prepare;
-    constructor(input: D1WebAuthnChallengeStoreOptions, spec: WebAuthnChallengeStoreSpec<R>);
-    put(record: R): Promise<void>;
-    consume(challengeId: string): Promise<R | null>;
-    del(challengeId: string): Promise<void>;
-}
-export {};
-//# sourceMappingURL=webAuthnStoreBackends.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts

@@ -1,29 +0,0 @@
-import type { ScopedD1Prepare } from '../../../../core/emailOtpD1Statements';
-import { type NearPublicKeyRecord } from '../webauthn/d1WebAuthnRecords';
-type D1NearPublicKeyListResult = {
-    readonly ok: true;
-    readonly keys: {
-        readonly publicKey: string;
-        readonly kind: NearPublicKeyRecord['kind'];
-        readonly signerSlot?: number;
-        readonly createdAtMs?: number;
-        readonly updatedAtMs?: number;
-        readonly authBinding?: NearPublicKeyRecord['authBinding'];
-    }[];
-} | {
-    readonly ok: false;
-    readonly code: 'invalid_args' | 'internal';
-    readonly message: string;
-};
-export declare class CloudflareD1NearPublicKeyStore {
-    private readonly prepare;
-    constructor(input: {
-        readonly prepare: ScopedD1Prepare;
-    });
-    listForRelayUser(input: {
-        readonly userId?: unknown;
-    }): Promise<D1NearPublicKeyListResult>;
-    listForUser(userId: string): Promise<NearPublicKeyRecord[]>;
-}
-export {};
-//# sourceMappingURL=d1NearPublicKeyStore.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts

@@ -1,4 +0,0 @@
-import { type EcdsaOwnerSourceSignerContinuityPortV1, type EcdsaLanePrivateBindingResolverPortV1 } from '../../signingLanes/cloudflareLaneCurveExecution';
-import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export declare function createCloudflareD1EcdsaLanePrivateBindingResolverV1(options: CloudflareD1LaneStoreOptions & EcdsaOwnerSourceSignerContinuityPortV1): EcdsaLanePrivateBindingResolverPortV1;
-//# sourceMappingURL=d1EcdsaLanePrivateBindingResolver.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts

@@ -1,4 +0,0 @@
-import { LaneAggregateRevocationApplicationService } from '../../../../core/signingLanes/LaneAggregateRevocationApplicationService';
-import type { CloudflareD1LaneLifecycleApplicationServiceOptions } from './d1LaneLifecycleApplicationService';
-export declare function createCloudflareD1LaneAggregateRevocationApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneAggregateRevocationApplicationService;
-//# sourceMappingURL=d1LaneAggregateRevocationApplicationService.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts

@@ -1,24 +0,0 @@
-import type { LaneEffectJournalStore, LaneEffectMutation, LaneEffectMutationResult, LaneEffectRecordV1 } from '../../../../core/signingLanes/LaneEffectJournalStore';
-import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export type CloudflareD1LaneEffectJournalStoreOptions = CloudflareD1LaneStoreOptions;
-export declare class CloudflareD1LaneEffectJournalStore implements LaneEffectJournalStore {
-    private readonly database;
-    private readonly scope;
-    constructor(options: CloudflareD1LaneEffectJournalStoreOptions);
-    getEffect(input: {
-        readonly effectId: string;
-    }): Promise<{
-        readonly version: number;
-        readonly commandDigestB64u: string;
-        readonly record: LaneEffectRecordV1;
-    } | null>;
-    recordEffect(input: LaneEffectMutation): Promise<LaneEffectMutationResult>;
-    confirmEffect(input: {
-        readonly effectId: string;
-        readonly expectedVersion: number;
-        readonly commandDigestB64u: string;
-        readonly responseDigestB64u: string;
-        readonly confirmedAtMs: number;
-    }): Promise<LaneEffectMutationResult>;
-}
-//# sourceMappingURL=d1LaneEffectJournalStore.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts

@@ -1,20 +0,0 @@
-import type { LaneEnrollmentGatewayV1 } from '../../../../../../shared-ts/src/signing-lanes';
-import type { LaneLifecycleStore } from '../../../../core/signingLanes/LaneLifecycleStore';
-export type CloudflareD1LaneEnrollmentGatewayOptions = {
-    readonly lifecycleStore: LaneLifecycleStore;
-};
-/** D1 gateway composition. Participant network calls are injected by callers. */
-export declare class CloudflareD1LaneEnrollmentGateway implements LaneEnrollmentGatewayV1 {
-    private readonly activation;
-    private readonly revocation;
-    constructor(options: CloudflareD1LaneEnrollmentGatewayOptions);
-    prepareLaneEnrollmentV1(...args: Parameters<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>): ReturnType<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>;
-    resumeLaneProtocolOperationV1(...args: Parameters<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>): ReturnType<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>;
-    recordLaneProtocolCommitV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>;
-    recordLaneHolderDeliveryV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>;
-    activateLaneServerMaterialV1(...args: Parameters<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>): ReturnType<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>;
-    commitLaneEnrollmentActivationV1(...args: Parameters<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>): ReturnType<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>;
-    fenceSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>;
-    completeSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>;
-}
-//# sourceMappingURL=d1LaneEnrollmentGateway.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts

@@ -1,13 +0,0 @@
-import { LaneLifecycleApplicationService, type LaneLifecycleAuthorizationPortV1, type LaneLifecycleCurveExecutionPortsV1 } from '../../../../core/signingLanes/LaneLifecycleApplicationService';
-import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export type CloudflareD1LaneLifecycleApplicationServiceOptions = CloudflareD1LaneStoreOptions & {
-    readonly authorization: LaneLifecycleAuthorizationPortV1;
-    readonly execution: LaneLifecycleCurveExecutionPortsV1;
-};
-/**
- * Builds the authenticated server-internal lane lifecycle boundary. Routes
- * should receive this service from their private composition and never expose
- * the receipt methods as a public raw-receipt endpoint.
- */
-export declare function createCloudflareD1LaneLifecycleApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneLifecycleApplicationService;
-//# sourceMappingURL=d1LaneLifecycleApplicationService.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts

@@ -1,51 +0,0 @@
-import type { CommitLaneEnrollmentActivationV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneProtocolCasResultV1, LaneServerActivationReceiptV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1 } from '../../../../../../shared-ts/src/signing-lanes';
-import type { LaneEnrollmentId, LaneOperationId } from '../../../../../../shared-ts/src/signing-lanes';
-import type { LaneAdmissionMutationResult, LaneEnrollmentAdmissionInput, LaneEnrollmentAdmissionRecord, LaneEnrollmentLifecycleCasInput, LaneEnrollmentRevocationCommitInput, LaneEnrollmentRevocationCommitResult, LaneEnrollmentVisibilityCommitResult, LaneLifecycleStore, LaneProductEpochLookup, LaneActiveProductEpochLookup, LaneProtocolAdmissionInput, LaneProtocolAdmissionRecord, LaneProtocolLifecycleCasInput, LaneSigningLaneRevocationCommitInput, LaneSigningLaneRevocationFenceMutationResult, LaneSigningLaneRevocationMutationResult } from '../../../../core/signingLanes/LaneLifecycleStore';
-import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export type CloudflareD1LaneLifecycleStoreOptions = CloudflareD1LaneStoreOptions;
-export declare class CloudflareD1LaneLifecycleStore implements LaneLifecycleStore {
-    private readonly database;
-    private readonly scope;
-    private readonly now;
-    constructor(options: CloudflareD1LaneLifecycleStoreOptions);
-    getEnrollment(enrollmentId: LaneEnrollmentId): Promise<LaneEnrollmentAdmissionRecord | null>;
-    getProtocol(operationId: LaneOperationId): Promise<LaneProtocolAdmissionRecord | null>;
-    /**
-     * Reads the committed protocol receipt only after verifying its persisted
-     * digest, receipt identity, and active protocol lifecycle binding.
-     */
-    getProtocolCommitReceipt(operationId: LaneOperationId): Promise<LaneProtocolCommitReceiptV1 | null>;
-    putEnrollmentAdmission(input: LaneEnrollmentAdmissionInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    putProtocolAdmission(input: LaneProtocolAdmissionInput): Promise<LaneAdmissionMutationResult<LaneProtocolRecordV1>>;
-    compareAndSetProtocolLifecycle(input: LaneProtocolLifecycleCasInput): Promise<LaneProtocolCasResultV1>;
-    compareAndSetEnrollmentLifecycle(input: LaneEnrollmentLifecycleCasInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    putProtocolCommitReceipt(receipt: LaneProtocolCommitReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProtocolCommitReceiptV1>>;
-    putHolderDeliveryReceipt(receipt: LaneHolderDeliveryReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneHolderDeliveryReceiptV1>>;
-    putServerActivationReceipt(receipt: LaneServerActivationReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneServerActivationReceiptV1>>;
-    putProductEpochPending(productEpoch: Extract<LaneProductEpochRecordV1, {
-        state: 'pending_visibility';
-    }>, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProductEpochRecordV1>>;
-    getProductEpoch(lookup: LaneProductEpochLookup): Promise<LaneProductEpochRecordV1 | null>;
-    private getProductEpochStored;
-    getActiveProductEpoch(lookup: LaneActiveProductEpochLookup): Promise<Extract<LaneProductEpochRecordV1, {
-        state: 'active';
-    }> | null>;
-    listEnrollmentProductEpochs(enrollmentId: LaneEnrollmentId): Promise<readonly LaneProductEpochRecordV1[]>;
-    commitEnrollmentVisibility(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentVisibilityCommitResult>;
-    fenceLaneRevocation(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceMutationResult>;
-    fenceEnrollmentRevocation(input: RevokeLaneEnrollmentV1): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    private commitLaneRevocationFence;
-    commitLaneRevocation(input: LaneSigningLaneRevocationCommitInput): Promise<LaneSigningLaneRevocationMutationResult>;
-    commitEnrollmentRevocation(input: LaneEnrollmentRevocationCommitInput): Promise<LaneEnrollmentRevocationCommitResult>;
-    private getFencedProductEpochByActivation;
-    private protocolInsertStatement;
-    private updateProtocolLifecycle;
-    private updateEnrollmentLifecycle;
-    private getEnrollmentRevocationFenceDigest;
-    private updateEnrollmentRevocationFence;
-    private putReceipt;
-    private readAndVerifyServerRetirementReceipt;
-    private verifyStoredRefreshPredecessorRetirements;
-    private readReceipt;
-}
-//# sourceMappingURL=d1LaneLifecycleStore.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts

@@ -1,28 +0,0 @@
-import type { LaneEnrollmentId, WalletKeyId } from '../../../../../../shared-ts/src/signing-lanes';
-import type { LaneLockResult, LaneLockStore } from '../../../../core/signingLanes/LaneLifecycleStore';
-import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export type CloudflareD1LaneLockStoreOptions = CloudflareD1LaneStoreOptions;
-export declare class CloudflareD1LaneLockStore implements LaneLockStore {
-    private readonly database;
-    private readonly scope;
-    constructor(options: CloudflareD1LaneLockStoreOptions);
-    acquireWalletKeyLock(input: {
-        readonly walletKeyId: WalletKeyId;
-        readonly lockId: string;
-        readonly ttlMs: number;
-        readonly nowMs: number;
-    }): Promise<LaneLockResult>;
-    acquireEnrollmentLock(input: {
-        readonly enrollmentId: LaneEnrollmentId;
-        readonly lockId: string;
-        readonly ttlMs: number;
-        readonly nowMs: number;
-    }): Promise<LaneLockResult>;
-    releaseLock(input: {
-        readonly lockKey: string;
-        readonly lockId: string;
-    }): Promise<boolean>;
-    private acquire;
-    private read;
-}
-//# sourceMappingURL=d1LaneLockStore.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts

@@ -1,5 +0,0 @@
-import { CloudflareLaneProtocolCommitterV1, type CloudflareLaneProtocolCommitterOptionsV1 } from '../../signingLanes/cloudflareLaneProtocolCommitter';
-import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
-export type CloudflareD1LaneProtocolCommitterOptionsV1 = CloudflareD1LaneStoreOptions & Omit<CloudflareLaneProtocolCommitterOptionsV1, 'gateway'>;
-export declare function createCloudflareD1LaneProtocolCommitterV1(options: CloudflareD1LaneProtocolCommitterOptionsV1): CloudflareLaneProtocolCommitterV1;
-//# sourceMappingURL=d1LaneProtocolCommitter.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts

@@ -1,107 +0,0 @@
-import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeLaneEnrollmentV1 } from '../../../../../../shared-ts/src/signing-lanes';
-import type { D1DatabaseLike, D1ResultLike } from '../../../../storage/tenantRoute';
-export type CloudflareD1LaneScopeV1 = {
-    readonly namespace: string;
-    readonly orgId: string;
-    readonly projectId: string;
-    readonly envId: string;
-};
-export type CloudflareD1LaneStoreOptions = {
-    readonly database: D1DatabaseLike;
-    readonly scope: CloudflareD1LaneScopeV1;
-    readonly now?: () => number;
-};
-export type LaneEnrollmentRow = {
-    readonly enrollment_id?: unknown;
-    readonly wallet_id?: unknown;
-    readonly manifest_digest_b64u?: unknown;
-    readonly manifest_json?: unknown;
-    readonly lifecycle_json?: unknown;
-    readonly version?: unknown;
-    readonly command_digest_b64u?: unknown;
-    readonly created_at_ms?: unknown;
-    readonly updated_at_ms?: unknown;
-};
-export type LaneProtocolRow = {
-    readonly operation_id?: unknown;
-    readonly enrollment_id?: unknown;
-    readonly wallet_id?: unknown;
-    readonly wallet_key_id?: unknown;
-    readonly source_lane_id?: unknown;
-    readonly source_lane_share_epoch?: unknown;
-    readonly source_revocation_epoch?: unknown;
-    readonly target_lane_id?: unknown;
-    readonly target_lane_share_epoch?: unknown;
-    readonly target_material_activation_id?: unknown;
-    readonly job_json?: unknown;
-    readonly lifecycle_json?: unknown;
-    readonly version?: unknown;
-    readonly command_digest_b64u?: unknown;
-    readonly created_at_ms?: unknown;
-    readonly updated_at_ms?: unknown;
-};
-export type LaneProductEpochRow = {
-    readonly product_json?: unknown;
-    readonly version?: unknown;
-    readonly command_digest_b64u?: unknown;
-};
-export type LaneReceiptRow = {
-    readonly receipt_id?: unknown;
-    readonly receipt_kind?: unknown;
-    readonly receipt_digest_b64u?: unknown;
-    readonly receipt_json?: unknown;
-    readonly created_at_ms?: unknown;
-};
-export declare function requireD1LaneStoreOptions(input: CloudflareD1LaneStoreOptions): {
-    readonly database: D1DatabaseLike;
-    readonly scope: CloudflareD1LaneScopeV1;
-    readonly now: () => number;
-};
-export declare function normalizeScope(scope: CloudflareD1LaneScopeV1): CloudflareD1LaneScopeV1;
-export declare function parseVersion(value: unknown, label: string): number;
-export declare function parseTimestamp(value: unknown, label: string): number;
-export declare function parseRequiredString(value: unknown, label: string): string;
-export declare function parseJsonRecord(value: unknown, label: string): Record<string, unknown>;
-/** Compare parsed JSON records without relying on insertion order. */
-export declare function equalLaneRecords(left: unknown, right: unknown): boolean;
-export declare function parseEnrollmentRow(row: LaneEnrollmentRow): {
-    readonly enrollmentId: string;
-    readonly walletId: string;
-    readonly manifestDigestB64u: string;
-    readonly manifest: LaneEnrollmentManifestV1;
-    readonly lifecycle: LaneEnrollmentLifecycleV1;
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly createdAtMs: number;
-    readonly updatedAtMs: number;
-};
-export declare function parseProtocolRow(row: LaneProtocolRow): {
-    readonly operationId: string;
-    readonly enrollmentId: string;
-    readonly walletId: string;
-    readonly walletKeyId: string;
-    readonly sourceLaneId: string;
-    readonly sourceLaneShareEpoch: string;
-    readonly sourceRevocationEpoch: number;
-    readonly targetLaneId: string;
-    readonly targetLaneShareEpoch: string;
-    readonly targetMaterialActivationId: string;
-    readonly record: LaneProtocolRecordV1;
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly createdAtMs: number;
-    readonly updatedAtMs: number;
-};
-export declare function parseProductEpochRow(row: LaneProductEpochRow): LaneProductEpochRecordV1;
-export declare function parseReceiptRow(row: LaneReceiptRow): {
-    readonly receiptId: string;
-    readonly receiptKind: string;
-    readonly receiptDigestB64u: string;
-    readonly value: LaneProtocolCommitReceiptV1 | LaneHolderDeliveryReceiptV1 | LaneServerActivationReceiptV1 | LaneServerRetirementReceiptV1 | AggregateLaneActivationReceiptV1 | AggregateLaneRevocationReceiptV1;
-};
-export declare function digestLaneEnrollmentRevocationCommand(input: RevokeLaneEnrollmentV1): Promise<string>;
-export declare function scopeValues(scope: CloudflareD1LaneScopeV1): readonly string[];
-export declare function firstBatchResult(results: readonly unknown[], index: number): D1ResultLike;
-export declare const LANE_CAS_GUARD_SQL = "INSERT INTO lane_cas_guard (guard_id) SELECT 1 WHERE changes() = 0";
-export declare function assertD1Success(result: D1ResultLike, label: string): void;
-//# sourceMappingURL=d1LaneRecords.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts

@@ -1,10 +0,0 @@
-export * from './d1LaneRecords';
-export * from './d1LaneLifecycleStore';
-export * from './d1EcdsaLanePrivateBindingResolver';
-export * from './d1LaneEffectJournalStore';
-export * from './d1LaneLockStore';
-export * from './d1LaneEnrollmentGateway';
-export * from './d1LaneLifecycleApplicationService';
-export * from './d1LaneAggregateRevocationApplicationService';
-export * from './d1LaneProtocolCommitter';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts

@@ -1,18 +0,0 @@
-type DurableObjectStorageLike = {
-    get(key: string): Promise<unknown>;
-    put(key: string, value: unknown, opts?: {
-        expirationTtl?: number;
-    }): Promise<void>;
-    delete(key: string): Promise<boolean>;
-    transaction?<T>(fn: (txn: DurableObjectStorageLike) => Promise<T>): Promise<T>;
-};
-type DurableObjectStateLike = {
-    storage: DurableObjectStorageLike;
-};
-export declare class ThresholdStoreDurableObject {
-    private readonly state;
-    constructor(state: DurableObjectStateLike, _env: unknown);
-    fetch(request: Request): Promise<Response>;
-}
-export {};
-//# sourceMappingURL=thresholdStore.d.ts.map